Lucene search
+L

34236 matches found

Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.7 views

PT-2025-42146

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...

7CVSS6.4AI score0.00727EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.9 views

PT-2025-42064

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is n...

7.8CVSS9AI score0.00396EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.14 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00155EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2025/10/14 12:00 a.m.40 views

Microsoft Windows Improper Access Control Vulnerability

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.02675EPSS
SaveIn wildExploits1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.6 views

PT-2025-42005

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An incorrect implementation of the authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. An unauthenticated...

8.4CVSS8.2AI score0.00333EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.7 views

PT-2025-42043

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue exists in the Windows Kernel. This condition allows a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a...

7.4CVSS9.3AI score0.01885EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.2 views

PT-2025-42057

Name of the Vulnerable Software and Affected Versions Connected Devices Platform Service Cdpsvc affected versions not specified Description A use after free condition exists in the Connected Devices Platform Service Cdpsvc. This allows an authorized attacker to gain elevated privileges on the loc...

4.7CVSS9.1AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.3 views

PT-2025-41995

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in the Microsoft Brokering File System component. This allows an unauthorized attacker to elevate privileges locally. A use-after-fre...

7.4CVSS9.6AI score0.0184EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.3 views

PT-2025-42054

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An issue with improper input validation exists in Microsoft Windows Speech. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

8.8CVSS8.8AI score0.00369EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.12 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could result in out-of-bounds writes and could lead to local elevation of privilege if a malicious attacker ha...

7.8CVSS6.7AI score0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.5 views

PT-2025-42037

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A race condition exists due to improper synchronization when concurrent processes access shared resources within Windows Resilient File System ReFS. This allows an...

7.4CVSS8.9AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.8 views

PT-2025-42081

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in Microsoft Brokering File System, potentially allowing an attacker to gain elevated privileges on a local system. Recommendations A...

7.4CVSS8.9AI score0.00238EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.5 views

PT-2025-42014

Name of the Vulnerable Software and Affected Versions Microsoft Windows Hyper-V affected versions not specified Description A race condition exists in Windows Hyper-V during concurrent execution using shared resources with improper synchronization. This allows a locally authorized attacker to...

7.8CVSS8.9AI score0.00249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.10 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check that could lead to out-of-bounds writes, which in turn could trigger a local elevation of privilege...

7.8CVSS6.4AI score0.00129EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/10/14 12:00 a.m.8 views

SUSE: Security Advisory (SUSE-SU-2025:03585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08438EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/13 9:30 a.m.11 views

EUVD-2025-34042

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

8.5CVSS6AI score0.00183EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/13 9:15 a.m.13 views

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

8.5CVSS0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/13 8:13 a.m.26 views

CVE-2025-9968

CVE-2025-9968 affects the Armoury Crate product family, specifically the UnifyScanner component. A link following vulnerability can be triggered by crafting a junction, potentially allowing local privilege escalation. Impact is described as high for confidentiality and integrity with local attack...

8.5CVSS6.1AI score0.00183EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 8:13 a.m.5 views

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

8.5CVSS6.1AI score0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/13 8:13 a.m.26 views

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

8.5CVSS0.00183EPSS
SaveExploits0References1
Rows per page
Query Builder